Cyber Operations Manager

Morgan Hunt; City Of London; Sur place; GBP 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Equal opportunities employer

Résumé du poste

Morgan Hunt is seeking a Cyber Operations Manager to lead the day-to-day cyber security operations and to advance detection, response and security operations capabilities.

The role splits 50/50 between leadership and hands-on security work, supervising three Cyber Security Analysts and acting as the senior technical escalation point across operations. It requires strong incident response and regulatory experience.

Qualifications

• Minimum 5 years of cyber security operations experience in regulated environments.
• Proven ability to lead cyber operations teams and develop staff.
• Strong incident response, investigations and recovery capabilities.
• Experience coordinating with external managed security services.

Responsabilités

• Lead day-to-day cyber security operations and drive continuous improvement.
• Coach and develop a team of three Cyber Security Analysts.
• Act as escalation point for incidents and operational challenges.
• Manage priorities, workloads and vendor relationships.
• Communicate security risks to technical and non-technical stakeholders.

Connaissances

Azure

Entra ID

SIEM

Detection engineering

Endpoint security

Email security

IAM

Vulnerability management

Network security

SASE

Threat hunting

Threat intelligence

Formation

CISSP

CISM

GIAC

Description du poste

Cyber Operations Manager

Overview

Our client is seeking a Cyber Operations Manager to lead the day-to-day operation of its cyber security function while driving the ongoing development of security operations, detection and response capabilities.

This is a technical leadership role with a 50/50 split between people management and hands‑on cyber security operations. The position has been created following a team restructure, with the objective of increasing the organisation's technical cyber security capability through the appointment of a strong technical team leader.

The Cyber Operations Manager will be responsible for leading a team of three Cyber Security Analysts and will act as a senior technical escalation point across cyber security operations.

Key Responsibilities

Security Operations Leadership

• Lead and manage the day-to-day cyber security operations function.
• Provide leadership, coaching and development to a team of three Cyber Security Analysts.
• Act as a technical escalation point for security incidents and operational challenges.
• Manage team priorities and workloads.
• Drive continuous improvement of cyber security operations capabilities.

Incident Response & Cyber Defence

• Lead cyber security incident investigations.
• Coordinate containment, eradication and recovery activities during security incidents.
• Support the development and maintenance of incident response procedures and playbooks.
• Remain effective in high‑pressure operational situations.

Security Monitoring & Detection

• Support and improve security monitoring and detection capabilities.
• Develop and enhance detection rules and operational security controls.
• Utilise threat intelligence and threat hunting techniques to improve detection and response capabilities.
• Contribute to ongoing improvements in security operations effectiveness.

Vulnerability & Security Operations Management

• Support vulnerability management activities and drive timely remediation of identified risks.
• Work with internal technology teams to improve operational security outcomes.
• Support the ongoing enhancement of security tooling and cyber defence capabilities.

Vendor & Stakeholder Management

• Manage relationships with outsourced security providers and security partners.
• Hold suppliers accountable for agreed service delivery.
• Work collaboratively with internal IT teams and Risk & Compliance stakeholders.
• Communicate technical risks and cyber security issues to both technical and non‑technical audiences.
• Embed cyber security considerations into technology projects and operational initiatives.

Essential Experience & Skills

Applicants should be able to demonstrate:

• At least 5 years' relevant cyber security experience.
• Experience working within a regulated environment such as:
  • Legal services
  • Professional services
  • Financial services
• Experience leading cyber security operations teams.
• Experience coaching, developing and managing cyber security professionals.
• Strong incident response experience.
• Experience leading cyber security investigations and recovery activities.
• Technical expertise across:
  • Microsoft Azure
  • Microsoft Entra ID
  • SIEM technologies
  • Detection engineering
  • Endpoint security
  • Email security
  • Identity and Access Management (IAM)
  • Vulnerability management
  • Network security
  • SASE technologies
• Experience improving operational cyber security capabilities.
• Experience developing detection rules and response playbooks.
• Experience using threat intelligence and threat hunting techniques.
• Experience managing outsourced security providers.
• Strong stakeholder management and communication skills.
• Ability to communicate technical concepts and risks to non‑technical stakeholders.

Desirable Experience

The following experience would be advantageous:

• Experience within a global law firm environment.
• Experience transforming or maturing security operations functions.
• Experience working with managed SOC services.
• Experience with security automation initiatives.
• Experience participating in or supporting purple team activities.
• Experience enhancing cyber security operations through process and capability improvements.

Qualifications

The following qualifications are desirable:

• CISSP
• CISM
• GIAC

Equivalent demonstrable experience will also be considered.

Team Structure

• Reports into: Head of Department
• Direct Reports: 3 Cyber Security Analysts
• Management / Hands‑on Split: 50% Leadership / 50% Technical

What This Role Is

• Cyber Operations Manager
• Security Operations Manager
• SOC Leadership role
• Technical Cyber Security Team Leader
• Incident Response & Security Operations leadership position

What This Role Is Not

• Governance, Risk & Compliance (GRC) Manager
• Information Security Governance role
• IT Audit role
• Compliance‑focused security position
• Policy‑only Information Security role

Desired Skills and Experience

• 5+ years' cyber security experience within a regulated environment (legal, professional services or financial services).
• Proven experience leading cyber security operations teams and developing team members.
• Strong incident response experience, including investigation, containment and recovery activities.
• Hands‑on expertise across Azure, Entra ID, SIEM, Detection Engineering, Endpoint Security, IAM, Vulnerability Management, Network Security and SASE.
• Experience improving security monitoring, detection and response capabilities.
• Experience with threat hunting, threat intelligence, detection rules and response playbooks.
• Experience managing outsourced security providers and third‑party security services.
• Strong stakeholder communication skills with the ability to explain technical risks to non‑technical audiences.

Morgan Hunt is an equal opportunities employer.